diff --git a/apps/production/gitea/deployment.yaml b/apps/production/gitea/deployment.yaml
index efe30fb..9d6afb8 100644
--- a/apps/production/gitea/deployment.yaml
+++ b/apps/production/gitea/deployment.yaml
@@ -26,6 +26,9 @@ spec:
           image: gitea/gitea:1.23
           ports:
             - containerPort: 3000
+              name: http
+            - containerPort: 2242
+              name: ssh
           env:
             - name: USER_UID
               value: "1000"
@@ -48,6 +51,10 @@ spec:
                 secretKeyRef:
                   name: gitea-db-secret
                   key: password
+            - name: START_SSH_SERVER
+              value: "true"
+            - name: SSH_PORT
+              value: "2242"
           volumeMounts:
             - name: gitea-data
               mountPath: /data
@@ -55,4 +62,3 @@ spec:
         - name: gitea-data
           persistentVolumeClaim:
             claimName: gitea-data
-
diff --git a/apps/production/gitea/ingress.yaml b/apps/production/gitea/ingress.yaml
index e211916..0bf4339 100644
--- a/apps/production/gitea/ingress.yaml
+++ b/apps/production/gitea/ingress.yaml
@@ -4,7 +4,6 @@ metadata:
   name: gitea-ingress
   namespace: gitea
   annotations:
-    # If you use cert-manager for TLS:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
 spec:
diff --git a/apps/production/gitea/service.yaml b/apps/production/gitea/service.yaml
index 0fb8d6b..4e23941 100644
--- a/apps/production/gitea/service.yaml
+++ b/apps/production/gitea/service.yaml
@@ -13,4 +13,18 @@ spec:
       name: http
   selector:
     app: gitea
-
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-ssh
+  namespace: gitea
+spec:
+  type: NodePort
+  selector:
+    app: gitea
+  ports:
+    - name: ssh
+      port: 2242
+      targetPort: 2242
+      nodePort: 32242 
\ No newline at end of file